@0xtosh

Offensive R&D Lead • Hacker • Cyber Defense Advisor • Speaker Founder https://xitter.cf/t.co/9R9AO44V7Z

 Copenhagen, Denmark
hackerminded.net
Joined May 2010
  • Tweets7.5K
  • Following872
  • Followers2.8K
445Media
Tom Van de Wiele retweeted
John Althouse@4A413315h
Sorry everyone... We're announcing a 0-Day vuln in QUIC that allows anyone to remotely turn off a server running these libraries. I swear we didn't plan this. foxio.io/blog/header-accordi…

Header Accordions: QPACK amplification attacks against HTTP/3 servers - FoxIO | Cyber Innovation

We solve the world’s toughest cyber challenges—creating breakthrough technology and embedding it into the systems that run everything.

foxio.io
71
423
238
2,644
385,826
Tom Van de Wiele retweeted
Herrington Darkholme
@hd_nvim20h
-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----
216
3,569
285
36,926
859,805
Tom Van de Wiele retweeted
Joel Grus 🤠
@joelgrus20h
she's a 10 but that was supposed to be a random 384-bit number
44
1,430
27
24,629
256,553
When you turn off PHP today, maybe leave it off this time.
1
159
I still run sync before logging out or doing anything with drives on Linux/UNIX. I have lost so much data during the 90s, it is just an ingrained habit at this point.
Shiny Quagsire@ShinyQuagsireOct 19
It has been 0 days since I've been bitten by the fact that Ubuntu's drive eject somehow doesn't run `sync` to *actually flush written files to the drive*
2
135
Tom Van de Wiele retweeted
Ian Carroll
@iangcarrollOct 20
For the next few days or weeks, anyone now has a root CA thanks to eMudhra. Time to have some fun with MiTMing unwilling devices!
48
230
82
2,813
475,307
While the defenders sprinkle .md files around on every system with "this host is not in scope, move along"
Nerv
@satellitedownOct 18
imagine being hacked and the attacker is leaving readme.md files all over your system that cause your ai to constantly give cyber refusals so you can't even use ai to defend yourself lmao
1
2
205
Gave Claude an overnight task that involves instrumenting another program. The other program is running >30m so Claude determines it is idle & proceeds to terminate itself to auto-update. Woke up to an empty screen. Even with AI, software is still not intuitive. @claudeai
135
Tom Van de Wiele retweeted
Robert Graham
@robertgrahamOct 18
The context behind such tweets is that the AI companies are rejecting 40 years of cybersecurity knowledge. They are ignorant of cybersecurity and are trying to re-invent it from scratch, repeating the mistakes of bad people from 40 years ago.
Matthew Green
@matthew_d_greenOct 18
What happens in a major incident where the frontier models all become unreachable?
11
49
2
264
8,971
Plus cyber insurance was probably a mistake. At least in the way it is being used now.
s1r1us
@S1r1u5_Oct 19
i am extremely pessimistic about what defenders can realistically achieve, not because secure systems are impossible to build or defenders are incompetent, but because the economics, incentives, and complexity are against them. security is not a necessary property for most things built in cyber.
140
Tom Van de Wiele retweeted
Matthew Green
@matthew_d_greenOct 19
So many people discovering that the whole Internet is dry tinder and the only thing keeping it from burning is the fact that teenagers haven’t found the matches yet.
10
38
5
250
11,455
Tom Van de Wiele retweeted
Steve Weis@sweisOct 16
As a treat, Claude also reverse engineered the NBS's 1977 DES S-box test vectors and determined that it was generated on a PDP-11 Unix V6 using rand() .
Steve Weis@sweisOct 16
CLAUDE FOUND THE SEEDS anthropic.com/research/ecdsa…

Claude reveals ECDSA curve origins

The decades-old mystery of the origins of one of the most popular cryptographic standards has been explained.

anthropic.com
15
37
4
312
25,940
Tom Van de Wiele retweeted
Matthew Green
@matthew_d_greenOct 15
I hate to say this because it goes against everything I believe in. But people are going to need to take down public firmware images for critical infrastructure, like yesterday.
101
153
51
2,419
257,531
Tom Van de Wiele retweeted
solst/ICE of Astarte
@IceSolstOct 14
Replying to @Jhaddix @Cl0uddStrife
When you don’t know what something is, you brute force it
2
14
806
Passkeys > TOTP or get phished with AitM
1
105
Tom Van de Wiele retweeted
Reads with Ravi
@readswithraviOct 13
Computer scientist Sara Hooker on underestimating difficulty:
56
2,172
136
21,165
394,372
This is what happens when let your operating system languish for a decade and are too focused on mobile unit sales. Someone is going to replace the broken functionality with what you should have had years ago. Plus it is open source.
Google Gemma
@googlegemmaOct 13
What if Spotlight actually understood the meaning inside your files? DigUp is an open-source macOS menu bar app powered by EmbeddingGemma 2 that brings 100% local, multimodal semantic search to your Mac. Instead of searching for file names, you can use natural language to: 📸 Find specific scenes in your photos ⏳ Jump to the exact timestamp in audio or video 💻 Search through your codebase by intent Everything runs locally in a single vector space.
1
138
It’s 2026 and we have to explain DMZs. What happened?
96
Tom Van de Wiele retweeted
gabsmashh
@gabsmashhOct 13
not every AI sandbox escape is evidence of an emerging superintelligence. sometimes you just have a shitty sandbox and bad security practices.
85
168
32
1,267
25,046
Fixed: "Norwegian Armed Forces think it is normal to drive random Chinese rental cars into their military bases with the dashcam on while they film themselves putting in access codes to the bases"
Nicolas Krassas
@DinosnOct 13
Chinese Cars in Norway Stored Military Exercise Footage and Access Codes militarnyi.com/en/news/chine…

Chinese Cars in Norway Stored Military Exercise Footage and Access Codes

Norwegian military personnel discovered that rented Chinese-made cars automatically recorded and stored video footage during military exercises.

militarnyi.com
88
Load more